Malicious code in fear-core-tasks (npm)

The package fear-core-tasks was found to contain malicious code...

Malicious code in maintenance_tasks (npm)

The package maintenancetasks was found to contain malicious code...

MAL-2025-15226 Malicious code in aws-gulp-tasks (npm)

The package aws-gulp-tasks was found to contain malicious code...

MAL-2025-25797 Malicious code in maintenance_tasks (npm)

The package maintenancetasks was found to contain malicious code...

Malicious code in aws-gulp-tasks (npm)

The package aws-gulp-tasks was found to contain malicious code...

MAL-2025-36528 Malicious code in test-mlw2-tweel-tasks-chank-mavis (npm)

The package test-mlw2-tweel-tasks-chank-mavis was found to contain malicious code...

MAL-2025-32904 Malicious code in sedona-angular-gulp-tasks (npm)

The package sedona-angular-gulp-tasks was found to contain malicious code...

MAL-2025-20341 Malicious code in fear-core-tasks (npm)

The package fear-core-tasks was found to contain malicious code...

Malicious code in humanapi-grunt-tasks (npm)

The package humanapi-grunt-tasks was found to contain malicious code...

MAL-2025-9270 Malicious code in @ruby-team/sst-tasks (npm)

The package @ruby-team/sst-tasks was found to contain malicious code...

MAL-2025-22790 Malicious code in humanapi-grunt-tasks (npm)

The package humanapi-grunt-tasks was found to contain malicious code...

CVE-2025-45313

A cross-site scripting XSS vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter...

CVE-2025-45313

A cross-site scripting XSS vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter...

HortusFox 安全漏洞

HortusFox is a free and open source self-hosted plant manager system from HortusFox, Inc. A security vulnerability exists in HortusFox v4.4 that stems from a cross-site scripting attack due to misuse of the parameter title in the /tasks endpoint...

PT-2025-33060 · Unknown · Hortusfox-Web

Name of the Vulnerable Software and Affected Versions: hortusfox-web version 4.4 Description: A cross-site scripting XSS vulnerability exists in the /tasks endpoint. Attackers can execute arbitrary JavaScript in the context of a user's browser by injecting a crafted payload into the title...

CVE-2025-45313

A cross-site scripting XSS vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter...

CVE-2025-45313

A cross-site scripting XSS vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter...

CVE-2025-45313

hortusfox-web v4.4 has an XSS in the /tasks endpoint: user-supplied title parameter can be crafted to inject JavaScript, executing in the attacker’s context. Root cause: insufficient input sanitization in the title field. Impact per sources: arbitrary JavaScript execution in the user’s browser; C...

CVE-2025-45313

A cross-site scripting XSS vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter...

Linux Distros Unpatched Vulnerability : CVE-2025-37884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix deadlock between rcutaskstrace and eventmutex. Fix the following deadlock: CPU A freeevent perfkprobedestroy mutexlock&eventmutex perftraceeventunreg...